Lookup for vulnerabilities affecting packages.
| Vulnerability_id | VCID-4nfp-3yek-eqfw |
| Summary | Content Security Policy combined with HTTP to HTTPS redirection can be used by malicious server to verify whether a known site is within a user's browser history. |
| Aliases |
|
| Fixed_packages |
|
| Affected_packages |
| 0 |
| url |
pkg:alpm/archlinux/firefox@49.0.2-1 |
| purl |
pkg:alpm/archlinux/firefox@49.0.2-1 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1es7-pnwd-pfdw |
|
| 1 |
| vulnerability |
VCID-41ax-gkjj-d7ec |
|
| 2 |
| vulnerability |
VCID-4nfp-3yek-eqfw |
|
| 3 |
| vulnerability |
VCID-6xqg-t9fu-2kfk |
|
| 4 |
| vulnerability |
VCID-9aj3-pduq-93bw |
|
| 5 |
| vulnerability |
VCID-9pxz-tehe-fff2 |
|
| 6 |
| vulnerability |
VCID-9tuh-j2va-53hy |
|
| 7 |
| vulnerability |
VCID-cejq-ngz9-myf7 |
|
| 8 |
| vulnerability |
VCID-ea8u-5x5j-dkch |
|
| 9 |
| vulnerability |
VCID-kkjv-tyxm-6ub7 |
|
| 10 |
| vulnerability |
VCID-p5hf-wuz3-d7er |
|
| 11 |
| vulnerability |
VCID-qxva-bj1v-3uf3 |
|
| 12 |
| vulnerability |
VCID-r153-j1t8-xucb |
|
| 13 |
| vulnerability |
VCID-tdn9-kq47-yfg3 |
|
| 14 |
| vulnerability |
VCID-vhgu-g4te-7bff |
|
| 15 |
| vulnerability |
VCID-vk8t-73y8-3qgr |
|
| 16 |
| vulnerability |
VCID-zj8v-3yfk-83bb |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/firefox@49.0.2-1 |
|
|
| References |
|
| Weaknesses |
|
| Exploits |
|
| Severity_range_score | 9.0 - 10.0 |
| Exploitability | null |
| Weighted_severity | null |
| Risk_score | null |
| Resource_url | http://public2.vulnerablecode.io/vulnerabilities/VCID-4nfp-3yek-eqfw |